Saw a hotel front desk clerk type a guest's card number into a plain Notepad file
Stayed at a place in Columbus last weekend and watched the clerk at check-in copy a guest's card number and expiry into a blank Notepad window on the front desk PC. She said the booking system crashes sometimes so they keep a running list there, and the file just sits on the desktop. There were about 40 guests listed in that file going back 2 weeks, no password, no encryption, nothing. If that machine ever gets hit by malware or a walk-in swipes a minute alone at the desk, every one of those cards is gone. Anyone else run into this at hotels, and is there a polite way to flag it without getting the clerk in trouble?